Windows CLFS Vulnerability Could Lead to ‘Widespread Deployment and Detonation of Ransomware’

Image: nicescene/Adobe Stock Microsoft has detected a zero-day vulnerability in the Windows Common Log File System (CLFS) being exploited in the wild to deploy ransomware. Target industries include IT, real estate, finance, software, and retail, with companies based in the US, Spain, Venezuela, and Saudi Arabia. The vulnerability, tracked as CVE-2025-29824 and rated “important,” is…

Read More

Elon Musk’s DOGE Is Getting Audited

Notes from a March 18 meeting, marked “Internal/Confidential,” show that a DOL lawyer presented colleagues with an overview of DOL’s interactions with DOGE. “So far,” the notes read, “they do not have write access. They have asked; we’ve held them at bay. We’ve tried to get them to tell us what they want & then…

Read More

Senator puts hold on Trump’s nominee for CISA director, citing telco security ‘cover up’

Democratic Sen. Ron Wyden has put a hold on the Trump administration’s nomination of Sean Plankey to head the federal government’s top cybersecurity agency, citing a “multi-year cover up” of security flaws at U.S. telecommunication companies. Wyden said in remarks, seen by TechCrunch and confirmed by the senator’s spokesperson, that he will block the nomination…

Read More

5 Reasons Why You Should Use a Password Manager

For the 2025 Specops Weak Password Report, researchers analyzed around 1.089 billion stolen passwords and found that the most commonly breached passwords consisted of eight characters. Alarmingly, out of the one billion compromised passwords, almost 230 million would be considered complex. This means they had a minimum of eight characters, a capital letter, a number, and…

Read More